DepsGuard hardens package manager configs against supply chain attacks
TL;DR. DepsGuard offers a new command-line tool to secure package manager configurations, protecting software development from critical supply chain vulnerabilities. - The tool automatically scans and fixes vulnerabilities in npm, pnpm, yarn, bun, and uv configurations. - It also checks for Renovate and Dependabot configs, creating backups before applying any changes. - DepsGuard is cross-platform, built in Rust, and focuses on security without running package installs.
- DepsGuard secures package manager configurations.
- The tool protects against software supply chain attacks.
- It supports npm, pnpm, yarn, bun, and uv.
- DepsGuard scans for Renovate and Dependabot configs.
- It provides interactive fixes and creates backups.
- DepsGuard is a cross-platform tool built in Rust.